[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#924417: marked as done (lintian: Allow *.pth files in python dist-packages)

Your message dated Mon, 18 Mar 2019 23:04:30 +0000
with message-id <E1h61J0-000FFg-HO@fasolo.debian.org>
and subject line Bug#924417: fixed in lintian 2.11.0
has caused the Debian Bug report #924417,
regarding lintian: Allow *.pth files in python dist-packages
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
924417: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924417
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: lintian
Version: 2.9.1
Severity: normal
Tags: patch

Dear Maintainer,

/usr/lib/python*/dist-packages/*.pth files currently trigger lintian error
tag:

unknown-file-in-python-module-directory

*.pth should not be unknown. They are well-documented by the Python
specification[1] and this location is exactly where they belong.

Legitimate uses of this file exist in the archive.  python-
testing.mysqld[2] and python-input-pad[3] override this tag with the phrase
"false positive". The vast majority (>150) of others including python-
matplotlib and python-gobject-2 simply ignore this lintian error as they
deploy pth files[4].

There few important cases of this lintian error being raised including:
- debdry deploying 'control'
- python-cf deploying 'delme.nc'
- python-django-ranged-response deploying 'db.sqlite3'
- python3-csvkit deploying 'stdin_out.csv'

One could argue that the use of *.pth files should be discouraged.
Installing a package which deploys a *.pth can change the global python
environment. In this case a new tag (perhaps with lower severity) would be
more appropriate which warns the packager to carefully check the file's
contents and consider removing it. A more relevant tag describing the
position is less likely to be ignored than a general error which says this
Python-specification-compliant file is 'unknown'. A new tag would be more
appropriate than changing this tag because there are legitimate and
important instances of the existing tag as-is.

Best Regards,

Stewart Ferguson

[1] https://docs.python.org/3/library/site.html
[2] 
https://sources.debian.org/src/python-testing.mysqld/1.4.0-3/debian/python3-testing.mysqld.lintian-overrides/
[3] 
https://sources.debian.org/src/input-pad/1.0.3-3/debian/python-input-pad.lintian-overrides/
[4] 
https://lintian.debian.org/tags/unknown-file-in-python-module-directory.html

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-2-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lintian depends on:
ii  binutils                       2.31.1-15
ii  bzip2                          1.0.6-9
ii  diffstat                       1.62-1
ii  dpkg                           1.19.5
ii  dpkg-dev                       1.19.5
ii  file                           1:5.35-2
ii  gettext                        0.19.8.1-9
ii  gpg                            2.2.12-1
ii  intltool-debian                0.35.0+20060710.5
ii  libapt-pkg-perl                0.1.34+b1
ii  libarchive-zip-perl            1.64-1
ii  libcapture-tiny-perl           0.48-1
ii  libcgi-pm-perl                 4.40-1
ii  libclass-accessor-perl         0.51-1
ii  libclone-perl                  0.41-1+b1
pn  libdigest-sha-perl             <none>
ii  libdpkg-perl                   1.19.5
ii  libemail-valid-perl            1.202-1
ii  libfile-basedir-perl           0.08-1
ii  libio-async-perl               0.72-1
ii  libipc-run-perl                20180523.0-1
ii  liblist-moreutils-perl         0.416-1+b4
ii  libparse-debianchangelog-perl  1.2.0-13
ii  libpath-tiny-perl              0.108-1
ii  libtext-levenshtein-perl       0.13-1
ii  libtimedate-perl               2.3000-2
ii  libtry-tiny-perl               0.30-1
ii  liburi-perl                    1.76-1
ii  libxml-simple-perl             2.25-1
ii  libyaml-libyaml-perl           0.76+repack-1
ii  man-db                         2.8.5-2
ii  patchutils                     0.3.4-2
ii  perl                           5.28.1-4
ii  t1utils                        1.41-3
ii  xz-utils                       5.2.4-1

Versions of packages lintian recommends:
ii  libperlio-gzip-perl  0.19-1+b5

Versions of packages lintian suggests:
pn  binutils-multiarch     <none>
ii  libhtml-parser-perl    3.72-3+b3
ii  libtext-template-perl  1.54-1

-- no debconf information

From d63a53132f8aa87895f38cddee932b93f7d4f218 Mon Sep 17 00:00:00 2001
From: Stewart Ferguson <stew@ferg.aero>
Date: Tue, 12 Mar 2019 19:51:20 +0100
Subject: [PATCH] Allowing *pth files in python dist-packages

---
 data/files/allowed-python-files | 1 +
 1 file changed, 1 insertion(+)

diff --git a/data/files/allowed-python-files b/data/files/allowed-python-files
index e55d096c9..edaba07d9 100644
--- a/data/files/allowed-python-files
+++ b/data/files/allowed-python-files
@@ -4,3 +4,4 @@
 \.egg-info$
 \.so$
 \.py[ic]?$
+\.pth$
-- 
2.20.1

Attachment: signature.asc
Description: This is a digitally signed message part


--- End Message ---
--- Begin Message --- 
Source: lintian
Source-Version: 2.11.0

We believe that the bug you reported is fixed in the latest version of
lintian, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 924417@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Chris Lamb <lamby@debian.org> (supplier of updated lintian package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 18 Mar 2019 22:20:48 +0000
Source: lintian
Binary: lintian
Architecture: source all
Version: 2.11.0
Distribution: unstable
Urgency: medium
Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
 lintian    - Debian package checker
Closes: 924082 924116 924417 924501
Changes:
 lintian (2.11.0) unstable; urgency=medium
 .
   [ Chris Lamb ]
   * Support dh-sequence-{gir,gnome,python3} etc. virtual packages as
     satisfying various build-dependencies. (Closes: #924082)
   * Don't detect non-maintainer upload (NMU) versions when checking for
     maintainer scripts that support "ancient" package versions.
     (Closes: #924501)
   * Correct false-positives in when checking for dh-runit packages that
     lack a "Breaks" substvar by ensuring that the binary package actually
     uses runit. (Closes: #924116)
   * Update the long description of the
     new-package-should-not-package-python2-module tag to justify further
     why a changelog entry is more appropriate than an override.
   * Remove errant "#" from the long description of
     inconsistent-appstream-metadata-license.
 .
   [ Felix Lechner ]
   * Deprecate static labs; all labs are temporary from now on.
   * In autopkgtests, allow output to stderr to shorten waiting period.
   * Fix the rules-requires-root-implicitly test on stretch.
   * For stretch-backports, also Build-Depend on the "XS" version of the
     Text::CSV Perl module in addition to the pure Perl version.
 .
   [ Stewart Ferguson ]
   * Allow *.pth files in Python directories to avoid false-positives for
     unknown-file-in-python-module-directory. (Closes: #924417)
 .
   [ Paul Wise ]
   * Add/fix several spelling corrections.
Checksums-Sha1:
 b9f25645ad0bbc2fc8f467d0b112626dcd87db63 3853 lintian_2.11.0.dsc
 43287ac82e6aed639187807c8a6680c8090d63c7 1717584 lintian_2.11.0.tar.xz
 298a911932e6b76a47fc1ce07d1e2b2eaeb44c9a 1187308 lintian_2.11.0_all.deb
 1beeba8b7e0dc5bb9f5e2229029e7c69106d24d8 18119 lintian_2.11.0_amd64.buildinfo
Checksums-Sha256:
 8f2c72cbc8d8f5747f36026075c5e9cd06e6d85d254e268a4cb60a16364506a4 3853 lintian_2.11.0.dsc
 4fc134fe7ac3fee9bdb32b069b841de196f1b081811d993e069bf073d2af1efe 1717584 lintian_2.11.0.tar.xz
 1350fdc89992dc834d45a704eeddfef4818e1c58ed424e5feafd35d0c79d0e57 1187308 lintian_2.11.0_all.deb
 8cd3c483d4ecb2da2803a95dfb799db1b92aa53feb7f973e671b742ae9e1c121 18119 lintian_2.11.0_amd64.buildinfo
Files:
 edc20194d72b8961527920f3a24876b3 3853 devel optional lintian_2.11.0.dsc
 3ca0f7959afe8d6c48f525d7ebbcfed6 1717584 devel optional lintian_2.11.0.tar.xz
 1e9e71223285f3fc797d063326c83989 1187308 devel optional lintian_2.11.0_all.deb
 ff41d0cecb6e30373c5fc8ff985ca174 18119 devel optional lintian_2.11.0_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlyQIbcACgkQHpU+J9Qx
Hlir5w//d20Io/h0Ebt/FcZKCWbJMmODd3DpEMPoYAq7TdiXRcSDQwUOwpkMuasC
HlRkQ17ql8wjxn2xwTakOd9DhFwBmjmWJlRW60j6dnb6XlEK8VINkdoSRS7N0OrP
Hvs8sUssLFEkaE/A35tu+SX59//7/tXXOosI8YD4YUCsF5Fpnjf7UJ/XF8ZoCn9a
76xw7K/G4Socl6zNPyVJDQef+UcvQ3qgwKpbnOnZt41hmuGwYE3WReOdLt5cwQwe
hvYf0RBcq6EhleAkbphRse9iaorUFREmWyGd8VgzbteNRfMKGntSNpMljG4C3tXk
+OAekreSUQI42yYpfmsMxwLQqfiAhwEKkk+XZYsXrqrofhij21bpxaWUjtKLyY1I
uikeWhiulYSuHDmb5ZdTlKwnaED35e6ep29xVlNJphWa2BG644uPhUqnqEDfykTy
yMZym8tbee4EfB/K5LYgEKPgNc1TCLsjZZYgw/xMV3ue3+GF1yTyJsDweRL/7yN8
BSsMjrsdIv3YL+sM1WUQUdt/o3xISPbYWhbOakQlxboHC4rTZKX8JvGJE7fcK52W
vJMbC1eMZDy4aNtzllITRKAxl7jx650QjD9IO7I1KH9hWUO82QnJceVPi8Me8U/7
npzGd+2uIl8i9vOvxVXt57E0S/7jJDZPB19seQ5bexAHnuhohHg=
=lCEU
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: